CVE-2023-31447
21.08.2023, 17:15
user_login.cgi on Draytek Vigor2620 devices before 3.9.8.4 (and on all versions of Vigor2925 devices) allows attackers to send a crafted payload to modify the content of the code segment, insert shellcode, and execute arbitrary code.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| draytek | vigor2620_firmware | 𝑥 < 3.9.8.4 |
| draytek | vigor2625_firmware | * |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| draytek | vigor2620 | 𝑥 < 3.9.8.4 | ADP |